Skill UI

Auto-activating data analytics skill that guides anomaly detection tasks, covering SQL, visualization, statistical analysis, and business intelligence best practices.

This SDK allows developers to build robust anomaly detection applications in Java using Azure AI services. It supports both univariate and multivariate time-series analysis, enabling detection of outliers, trend changes, and correlated signals over large datasets. Ideal for real-time monitoring, operational intelligence, and advanced data quality checks.

This SDK allows developers to build robust anomaly detection applications in Java using Azure AI services. It supports both univariate and multivariate time-series analysis, enabling detection of outliers, trend changes, and correlated signals over large datasets. Ideal for real-time monitoring, operational intelligence, and advanced data quality checks.

This guide provides expert patterns for building robust, observable infrastructure for database migrations. It covers real-time monitoring using Change Data Capture (CDC), metrics collection (Prometheus/Grafana), and anomaly detection. Use this skill when setting up CDC pipelines (e.g., Debezium with Kafka) or implementing comprehensive observability for database schema changes and data synchronization processes.

Enables Claude to apply anomaly-detection-system workflows for spotting outliers, fraud, or unusual patterns across datasets, selecting tailored algorithms like Isolation Forest and summarizing deviations for any data monitoring or security use case.

Aeon is a scikit-learn compatible toolkit for time series machine learning, covering classification, regression, clustering, forecasting, anomaly detection, segmentation, similarity search, and feature extraction on temporal data.

An AI-driven comprehensive health analysis system that integrates multi-dimensional datasets, including biometrics, lifestyle, and medical history. It excels at anomaly detection, predicting various health risks (e.g., CVD, Diabetes), providing personalized, evidence-based recommendations, and generating detailed, interactive health reports.

This tool detects abnormal access patterns across major cloud storage services (AWS S3, GCS, Azure Blob Storage). By analyzing audit logs like CloudTrail, it uses statistical baselines and time-series anomaly detection to identify suspicious activities such as after-hours bulk downloads, access from new IPs, or unusual API call spikes. It is crucial for investigating potential data exfiltration incidents or building robust cloud security detection rules.

This skill analyzes DNS query logs to detect sophisticated threats such as data exfiltration via DNS tunneling, Domain Generation Algorithm (DGA) usage, and covert Command and Control (C2) channels. It utilizes advanced techniques like entropy analysis, query volume anomaly detection, and subdomain length analysis within SIEM platforms, helping SOC teams identify threats that bypass traditional network security controls.

This skill provides a structured methodology and tools for investigating sophisticated supply chain attacks. It focuses on detecting trojanized software updates, compromised build pipelines, and hidden dependencies by performing deep binary comparison, code signing verification, and anomaly detection. Use it during incident response to map out intrusion vectors and assess the full scope of a security breach.

This guide details how to write advanced correlation searches using Splunk's Search Processing Language (SPL). It covers techniques like threshold-based detection, sequence analysis, and anomaly detection to identify sophisticated security threats (e.g., brute force, data exfiltration, lateral movement) in a Security Operations Center (SOC) environment. Mastery of SPL is essential for closing SIEM detection gaps and ensuring compliance.

A comprehensive guide to deploying and configuring Suricata as a high-performance Intrusion Detection System (IDS) or Intrusion Prevention System (IPS). This skill covers setting up multi-threaded packet processing for high-throughput links, enabling protocol-aware inspection (HTTP, TLS, DNS, SMB), generating structured EVE JSON logs for SIEM ingestion, and integrating advanced signature and anomaly detection capabilities.